Security Bulletin: Multiple Security vulnerabilities have been identified in IBM Websphere Application Server and IBM Java shipped with IBM Security Access Manager for Enterprise Single Sign-On

Summary

IBM Websphere Application Server is shipped as a component of IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM Websphere Application Server has been published in a security bulletin.

IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin Potential cross-site scripting in the Admin Console for WebSphere Application Server (CVE-2016-8934) for vulnerability details and information about fixes.
Please consult the security bulletin Potential Information Disclosure in WebSphere Application Server (CVE-2016-9736) for vulnerability details and information about fixes.
Please consult the security bulletin Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Versions

| Affected Supporting Product and Version
—|—
ISAMESSO 8.2, 8.2.1, 8.2.2| IBM Websphere Application Server 7.0, 8.0 and 8.5
ISAMESSO 8.2, 8.2.1, 8.2.2| IBM® SDK, Java™ Technology Edition 1.7

Remediation/Fixes

None

Workarounds and Mitigations

None